Windows apps · Application version · August 14, 2026

Oracle VirtualBox 7.2.16

Oracle VirtualBox 7.2.16, released August 14, 2026, fixes 21 CVEs in Oracle VirtualBox. None of them is reported as exploited. Patch Radar priority: High. The latest Oracle VirtualBox is 7.2.22, which also fixes every one of these CVEs.

High

Superseded. The latest Oracle VirtualBox is 7.2.22, which also fixes every CVE on this page. Install that instead.

CVEs closed

None rated Critical

Exploited

None reported

Highest CVSS

8.6

Base score, 0 to 10

Highest EPSS

0.0044

38th percentile

Priority of the 21 CVEs

Patch now 0
                                Urgent 0
                                High 9
                                Routine 12

Applies to

Product	Version
Oracle VirtualBox	7.2.16

CVEs this fix closes

Priority	CVE	Title	CVSS	EPSS	Exploitation
High	CVE-2026-71113	Oracle VirtualBox: Improper Access Control	7.5	0.0044	None reported
High	CVE-2026-71130	Oracle VirtualBox: Improper Access Control	8.2	0.0035	None reported
High	CVE-2026-71131	Oracle VirtualBox: Improper Access Control	8.6	0.0018	None reported
High	CVE-2026-71129	Oracle VirtualBox: Improper Access Control	8.2	0.0018	None reported
High	CVE-2026-71141	Oracle VirtualBox: Improper Access Control	7.7	0.0017	None reported
High	CVE-2026-71136	Oracle VirtualBox: Improper Access Control	7.3	0.0016	None reported
High	CVE-2026-71138	Oracle VirtualBox: Improper Access Control	7.3	0.0016	None reported
High	CVE-2026-71116	Oracle VirtualBox: Improper Access Control	7.5	0.0015	None reported
High	CVE-2026-71126	Oracle VirtualBox: Improper Access Control	7.8	0.0013	None reported
Routine	CVE-2026-71114	Oracle VirtualBox: Improper Access Control	6.0	0.0017	None reported
Routine	CVE-2026-71115	Oracle VirtualBox: Improper Access Control	6.0	0.0017	None reported
Routine	CVE-2026-71128	Oracle VirtualBox: Uncontrolled Resource Consumption	6.0	0.0017	None reported
Routine	CVE-2026-71139	Oracle VirtualBox: Allocation of Resources Without Limits or Throttling	4.4	0.0017	None reported
Routine	CVE-2026-71127	Oracle VirtualBox: Improper Access Control	6.0	0.0016	None reported
Routine	CVE-2026-71135	Oracle VirtualBox: Improper Access Control	6.0	0.0016	None reported
Routine	CVE-2026-71137	Oracle VirtualBox: Improper Access Control	6.0	0.0016	None reported
Routine	CVE-2026-71140	Oracle VirtualBox: Improper Access Control	3.4	0.0016	None reported
Routine	CVE-2026-71134	Oracle VirtualBox: Improper Access Control	5.7	0.0016	None reported
Routine	CVE-2026-71132	Oracle VirtualBox: Improper Access Control	5.3	0.0014	None reported
Routine	CVE-2026-71125	Oracle VirtualBox: Race Condition Enabling Link Following	6.1	0.0013	None reported
Routine	CVE-2026-71151	Oracle VirtualBox: Improper Access Control	5.6	0.0013	None reported

Other Oracle VirtualBox versions with security fixes

Oracle VirtualBox 7.2.22
Oracle VirtualBox
Oracle VirtualBox 7.2.18
Oracle VirtualBox
Oracle VirtualBox 7.2.14
Oracle VirtualBox
Oracle VirtualBox 7.2.10
Oracle VirtualBox
Oracle VirtualBox 7.2.8
Oracle VirtualBox
Oracle VirtualBox 7.2.6
Oracle VirtualBox

For tools and AI agents

This page as data: JSON · Markdown

Link to this page

If this page saved you time, a link to it in your ticket, advisory or write-up helps others find it.

HTML

<a href="https://patchblox.com/security/fix/windows-app/oracle.virtualbox-7.2.16">Oracle VirtualBox 7.2.16 on Patchblox Patch Radar</a>

Reusing the data? How to credit Patch Radar.

Is it current everywhere?

Patchblox finds every install below the fixed version, including per-user copies, and updates them from a signed catalog package.

Get a demo

Patch Radar data is free to use with attribution. Terms and how to credit it.

Product names, logos and trademarks shown on Patch Radar belong to their respective owners. They are used only to identify the software each security fix applies to and to help readers find their platform. Their use does not imply any affiliation with, or endorsement by, those owners, and Patchblox is not affiliated with any of them.